A vulnerability was found in module-from-string 3.3.1 and classified as problematic. This issue affects the function lib.requireFromString. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

The identification of this vulnerability is CVE-2024-57072. The attack can only be done within the local network. There is no exploit available.